H5 Appliances

H5 Appliances
New corporate challenge: quick, accessible and
comprehensive network visibility
As communications and applications on IP networks are more and
more converging with booming and evolving network usages,
enterprises, service providers and government organizations, in order
to support their daily operations, need to understand, quickly and
comprehensively what's happening with the business applications
running on their network. Moreover corporations must provide network
visibility to all the IT teams with reduced operational costs and IT
investments.
APPLICATION FLOWS
Port Mirror / TAP
Network Flow
Inspection
H5 Vision: network visibility technology
Per Flow Data
Storage
Taking advantage of a 20-year experience running network audits on
the enterprise market, H5 audits designed an innovative technology to
enable enterprises, service providers and governments to
enhance their global network application visibility. With H5 audits,
corporations can deploy comprehensive and easy to use software and
appliance architecture that allows the various IT teams to see
understand and share clear and comprehensive information on
how applications behave on the enterprise network. The solution
introduced with H5 Appliance provides a powerful network visibility
solution not only for the network operations center but also for
network managers building the network and planning the growth and
the changes and for the helpdesk supporting the users on a daily
basis.
Per Flow Analyses,
Reporting & Alerts
H5 Appliance: network visibility made safe,
easy and cost effective
The H5 Appliance can easily be deployed in any network; it
is installed on a port mirroring interface or a tap and does
not require any network change or interruption.
The H5 Appliance requires neither complex configuration
nor architecture design; it inspects the traffic and extracts
all required data in real-time and delivers the first reports
and network application data a few minutes after power on.
Unified network visibility software architecture
A common tool for all actors
H5 Appliance: powerful
all-in-one-box
architecture
- Risk reduction
- Problem finger pointing - Early incident warning
- Operation Assessment
- Infrastructure tuning
- Enhance productivity
- Governance
- Accelerate incident
resolution
- Escalation ratio
reduction
© 2013 H5 audits - All rights reserved
The H5 Appliance does not
require any external reporting
portal or storage space to
operate. Traffic monitoring, data
extraction,
storage
and
presentation functions are all
provided by the appliance.
The H5 Appliance captures,
analyzes, records and reports
network application behavior and
performance information for all
the flows of all individual IP nodes
active on the network without loss
at the rates up to 10Gbps.
www.h5audits.com
Energy 4, 155-159 rue du Docteur Bauer
93400 Saint-Ouen - France
Tel : +33 1 49 48 12 00
Fax : +33 1 49 48 12 04
[email protected]
H5 Appliance advanced Layer 4 Monitoring:
Solution to address corporate network visibility challenge.
Init Application Response Time
SYN
SYN/ACK
ACK
Server Response Time
Request
Datas
ACK
RTT OUT (WAN)
Datas
ACK
RTT IN (LAN)
Request
ACK
Network application performance
monitoring is governed by two drivers:
the calculation layer of the network
performance metrics and the network
object
inspection
depth
and
granularity.
H5 choice was to extensively develop
the Layer 4 and strongly rely on IETF
standards (TCP, UDP, RTP, etc.)
accepted and used by all the industry.
The metrics calculated by all H5
appliances allows administrators to set
efficient and application aware
performance
troubleshooting
strategies without the risk of
depending
on
proprietary
technologies.
Besides H5 choice for inspection
depth was to identify the network
nodes by their IP addresses and
VLANs and record and aggregate 100%
of top conversations on the network
with no information loss usually due to
deeper and less reliable network
session technologies.
These two choices allowed H5 to
design strong and reliable solution
that enable in one single appliance
real time network application trouble
shooting and latter stage analyses of
network events and conditions weeks
and months they occurred.
In addition to being exhaustive and
reliable advanced Layer 4 monitoring
provides network application data
that network managers can easily
correlate with business application
user experience and behavior and
network infrastructure operating
state.
Application performance
With more than 50 TCP and UDP metrics recording application performance and transmission conditions over the network H5 Appliances
provide network operation engineers with the most efficient and reliable
user quality of experience and behavior information.
More than any other metrics TCP server response time and TCP round
trip time peaks allows network operation engineers to isolate abnormal
conditions and degraded performance situation over time and in the
cloud of conversations.
Most of the metrics are either server or client side (or in some conditions
LAN or WAN side) to enable infrastructure trouble shooting.
P6
P5
Data aggregation
over time
Network AƉƉůŝĐĂƟŽŶ Flows
1-Minute
Data
5-Minutes
Data
1-Hour
Data
1-Day
Data
All top conversations metrics
are stored in a database for
quick access. The persistence
of the information over large
time periods is guaranteed by
a robust and intelligent aggregation process that reduces
the time granularity while
maintaining the conversation
records. Network operation
engineers can access to the
full top conversation metrics
months after and can easily
compare application behavior
and performance for different
period of time.
P2
P1
P4 ?
VoIP quality
VoIP voice transfer relies on connectionless RTP (Real Time Protocol)
slightly different than TCP. H5 Appliances produce a specific set of
metrics for each voice call including well-known MOS allowing network
operations engineers to measure the quality of VoIP service without
having to deploy complex and costly VoIP agents on phones and
gateway.
P3
Loss
Jitter
MOS
Watched Object and Business Flows
By default all nodes have an equal weight in the H5 appliance
conversation database, in order to build network application
performance visibility that reflects the network architecture or
the corporate organization. H5 Appliance provide several
powerful and easy to use features that allow network operation
engineers and administrators to arrange and organize flow data
and classify custom applications.
With Watched Objects network administrators
can create or import their network address plan to
group IP nodes and process application
performance metrics for corporate sites, branches
offices, server farms, etc. but also isolate and
highlight low volume conversations that would be
TCP
UDP
lost in the conversation cloud.
With Business flows, in conjunction or not with
watched objects, network managers can classify their
custom and business applications and track them
specifically over time.
Both watched object and business flows allows
corporation to align their views, reports and alerts with
their business activity and objectves.
© 2013 H5 audits - All rights reserved
Enhanced IT Team Collaboration
H5 Appliance: one-box-to-serve-them-all
The H5 appliance provides all the IT teams with the all services in a The services provided by H5 Appliance are tightly integrated and
single box for analysis, reporting and abnormal situation make the collaboration between the different IT team more
awareness without any third-party software or service: The efficient. For instance, network operation engineers can generate,
real-time Java interface H5-Dock for the network operations within a trouble shooting or flow analyzes work session, reports or
alerts for the same context he is working
center; the web dynamic reporting
Network AƉƉůŝĐĂƟŽŶ Flows
on with one click.The reporting portal
portal for network managers and the
showing scheduled or historic reports is
SNMP or e-mail alerts for the help
constantly fed and updated with the
desk.
same data as the network operation
team.
?
Network Engineer
HelpDesk
Network Application
Health Profiling
DSI
Critical Condition
Awareness
Real Time
Network Analyses
H5-Dock: powerful Java client for real-time
flow analysis
The H5 appliance provides in-one-box all services for all
the IT teams without any third-party software or service.
The real-time Java interface H5-Dock is the standard
graphical user interface provided by the H5 Appliance to
network operations engineers. It is downloaded from the H5
Appliance Web interface and run on any workstation using
WebStart standard. H5-Dock loads data in real-time from
the appliance network application flow database and
dynamically displays the node and metrics information on
pre defined and custom tables and charts views.
Multiple views can be created on a single H5-Dock instance to
observe the network flows over different time periods and
geographic regions and multiple appliances.
The H5-Dock GUI provides a powerful set of analyzes tools including the ability to drill down successively from table views to time
chart view to quickly isolate detailed data on specific or abnormal
network conditions over a large period and thousands of IT conversations.
The network operations engineers can easily design troubleshooting
scenario that can be saved loaded and shared within a few clicks. The
typical abnormal situations and network application incidents
observed on a daily basis contribute therefore to build a knowledge
base of troubleshooting conditions that gradually improve the productivity of the network operations center and reduce the network application incidents downtime.
H5 Appliance: Aggregation objects
The key feature for forensics and drilldown strategies with H5 Appliances are the aggregation objects. When visualizing the network
conversation network operations engineers always starts with highest aggregation objects to get the most global picture of the network
situation and drilldown to individual
nodes and conversation for more
detailed views to qualify incidents and
Total Traffic
Global traffic captured by the appliance.
behavior.
Top IP addresses
Top IP talkers from global captured traffic by Byte volume.
Supported aggregation objects
Top IP Conversations
Top IP conversations from global captured traffic by Byte volume.
VLANs
802.1q VLANs detected from global captured traffic.
IP Protocols
TCP, UDP protocols identified by port from global captured traffic.
RTP Protocols
Automatically detected by H5-Appliance on captured traffic, RTP
aggregation object enable display of specific RTP metrics (jitter,
inter-packet gap, MOS …).
Watched Objects
Table of active watched objects
Business Flows
Table of active business flows
© 2013 H5 audits - All rights reserved
H5 Appliances
Supported TCP/UDP Metrics (sample)
Throughput (Kbps)
Volume (Bytes)
TCP connection failure (%)
Connection requests (#)
Connection time (ms)
Packet retransmission (#)
New successful Connections (#)
Packet Loss (#)
Loss rate (%)
Packets transmitted (#)
TCP payload (Bytes)
TCP resets (#)
Retransmission delay (ms)
RTT (ms)
Server Response Time (ms)
Packet rate (pps)
Total throughput in Kbps of the object traffic.
Total Volume in bytes of the object traffic.
Rate of failed TCP connections, from total connections initiated by the object IP addresses.
Total connections requests initiated by the object IP addresses.
Average of TCP handshake in millisecond of all connections initiated by the object IP
addresses.
Retransmitted packet count from the object IP addresses (identical packets, with same
TCP sequence number).
Successful (completed handshake) connection count from the object IP addresses.
Missing packets detected from the object IP addresses.
Missing packets rate from total packets sent by the object IP addresses.
Total packets sent by the object IP addresses.
TCP payload volume in bytes sent by the object IP addresses.
Count of TCP segment RST (Reset) detected from the object IP addresses.
Average delay between retransmitted packet and initial packet from the object IP
addresses.
Average one-way TCP delay in milliseconds between TCP Packet and TCP
acknowledgments from the object IP addresses.
TCP Server response time to TCP requests in milliseconds sent to the object IP
addresses.
Packet rate in pps from the object IP addresses.
Supported VoIP/RTP Metrics (sample)
Inter packet gap (ms)
Jitter (ms)
Retransmissions (#)
Bad sequenced packets (#)
Packet loss (#)
RTP packet burst size (#)
MOS
Average delay between RTP consecutive packets for one-way RTP conversations issued
by object IP addresses.
Average variation of RTP inter-packet gap for one-way RTP conversations issued by
object IP addresses.
Total RTP retransmissions detected on one-way RTP conversations issued by object IP
addresses.
Out of sequence RTP packets detected on one-way RTP conversations issued by object
IP addresses.
Total lost RTP packets (missing in the RTP sequence) on one-way RTP conversations
issued by object IP addresses.
Average packet burst in packet count on one-way RTP conversations issued by object IP
addresses.
Mean Opinion Score, ranging from 1 to 5 evaluating call perceived quality, calculated from
RTP metrics following E-model on one-way RTP conversations issued by object IP
addresses.
H5 Appliance: Scalability and flexibility.
H5 Appliances scale as your network and you need for network
application visibility grows. The unique H5 Appliance software is
supported by the whole range of H5 Appliance hardware platforms.
The H5 Appliance model choice only depends on the throughput of
traffic that needs to be monitored from a few megabits per second to
10 Gigabits per second.
AMoreover, H5 Appliance VLAN support allows the network
administrator to take advantage of advanced features provided by
high-end network taps such as policy based traffic tagging. For
instance a single H5-700 appliance can monitor the traffic of
multiple 1Gbps networks over one single 10Gbps monitor interface
with full separation of traffic.
H5 100
10 Mbps – 50 Mbps
SME
Branch Office
H5 200
50Mbps – 200Mbps
Enterprise
H5 300
200Mbps – 1Gbps
Enterprise
H5 700
500 Mbps
–
10Gbps
Data Center
Service Provider
www.h5audits.com
Energy 4, 155-159 rue du Docteur Bauer
93400 Saint-Ouen - France
Tel : +33 1 49 48 12 00
Fax : +33 1 49 48 12 04
[email protected]
© 2013 H5 audits - All rights reserved